Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/U-BuvctERCjQED_kTJJj6IdEhPQ.roa
File: U-BuvctERCjQED_kTJJj6IdEhPQ.roa (raw, json)
Hash identifier: xQsAjh7b4p78yiOSJxhyaUBkzyxL/cKxtamABJlzzwc=
Subject key identifier: 53:E0:6E:BD:CB:44:44:28:D0:10:3F:E4:4C:92:63:E8:87:44:84:F4
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 018570395EBEB890B71C8622BFD2932CA648
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/U-BuvctERCjQED_kTJJj6IdEhPQ.roa
Signing time: Mon 02 Jan 2023 02:04:46 +0000
ROA not before: Mon 02 Jan 2023 02:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 194.39.0.0/20 maxlen: 20
194.39.16.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:5e:be:b8:90:b7:1c:86:22:bf:d2:93:2c:a6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Jan 2 02:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53e06ebdcb444428d0103fe44c9263e8874484f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:81:99:c0:53:cb:13:5b:df:97:cf:af:01:
2c:a6:c1:5c:82:08:73:3a:f1:a1:63:ac:c3:e5:b8:
5f:60:55:60:5c:05:bf:2b:88:a8:f9:43:f0:c2:0f:
69:c7:eb:b0:65:62:5a:f5:53:37:ce:87:28:73:ef:
23:3c:af:58:83:fa:fe:a7:ce:d9:b6:6f:24:02:b9:
b8:b6:bf:26:33:59:9e:f2:24:84:e0:56:66:49:a5:
54:a3:62:b0:1a:8c:c2:03:e1:31:fe:f3:00:83:5d:
78:08:38:3b:b7:85:68:f5:e6:a1:ab:b0:78:73:6e:
4e:d3:b9:94:38:a8:48:c6:9a:08:95:49:61:1f:b4:
d6:fc:41:d4:dd:1a:9c:b0:4b:90:9e:5c:2c:63:e9:
23:30:3d:cb:5b:57:ac:b2:bf:5a:3f:fa:9a:95:5a:
2d:9f:64:2a:f9:82:72:d5:1c:22:22:06:1c:da:2f:
31:41:6b:8a:24:bb:6f:f7:70:b5:99:3e:d9:0b:c3:
51:a4:7d:24:fd:41:2b:74:38:db:d2:f2:61:2c:41:
f2:aa:28:b4:60:8e:58:4c:50:a3:3e:71:20:82:7b:
23:17:68:43:04:bc:51:c4:d7:d5:37:25:b4:69:a9:
d8:90:92:c7:e4:49:24:ff:95:e1:bf:bd:81:e0:2c:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E0:6E:BD:CB:44:44:28:D0:10:3F:E4:4C:92:63:E8:87:44:84:F4
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/U-BuvctERCjQED_kTJJj6IdEhPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.0.0-194.39.23.255
Signature Algorithm: sha256WithRSAEncryption
49:bf:34:b5:9d:7b:75:2e:18:ab:a8:17:68:50:fb:3f:81:6c:
f2:a4:35:cb:fe:6c:0c:52:95:fe:4a:6e:a3:e6:30:32:15:f0:
ae:eb:4a:19:4e:32:a6:53:a0:23:0b:0c:86:4c:2c:b1:f6:9c:
a4:3d:89:04:5f:c5:7c:83:e6:87:38:ac:8e:fe:20:ca:46:28:
78:af:36:2b:cb:44:7a:51:5d:ae:32:94:b0:be:db:b1:ce:37:
9b:f2:d7:27:4b:ac:50:db:96:70:e7:40:0c:ad:2d:df:bb:79:
84:c9:1a:5b:3d:ce:5a:ff:40:0d:ba:04:96:fe:9b:cc:62:30:
bc:5e:66:9a:c6:ed:bd:e3:99:aa:e5:26:51:0f:97:30:84:2a:
0e:7d:66:ed:91:86:17:df:a2:56:b4:be:34:cf:ed:5a:f4:84:
31:a9:c2:21:71:e0:16:a6:ab:8b:92:fc:51:54:96:39:3d:41:
a0:c2:bf:0c:77:05:0c:ef:0c:3f:f9:1b:9c:12:73:88:c3:5d:
09:33:4b:29:22:1e:a6:2f:c1:eb:fb:a1:36:00:b5:fa:b8:2c:
a4:1f:87:c0:ef:cb:1f:b1:1d:8b:b1:25:ba:32:25:ff:ae:76:
fb:d1:6e:09:a1:7c:18:9e:66:03:b8:c9:2e:35:de:e9:32:eb:
f0:ff:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:20 2024 by rpki-client on console-fra.rpki-client.org